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Model-based  Monitoring  of  Piecewise  Continuous 
Behaviors  using  Dynamic  Uncertainty  Space  Partitioning1 

Bernhard  Rinner2  and  Ulrich  Weiss2 


Abstract.  Monitoring  gains  importance  for  many  technical  systems 
such  as  robots,  production  lines  or  anti  lock  brakes.  A monitoring 
system  for  technical  systems  must  be  able  to  deal  with  incomplete 
knowledge  of  the  supervised  system,  to  process  noisy  observations 
and  to  react  within  predefined  time  windows.  This  paper  presents  a 
new  approach  to  monitoring  technical  systems  based  on  imprecise 
models.  Our  approach  repeatedly  partitions  the  uncertainty  space  of 
an  imprecise  model  and  checks  the  derived  model’s  state  for  consis- 
tency with  the  measurements.  Inconsistent  partitions  are  then  refuted 
resulting  in  a smaller  uncertainty  space  and  a faster  failure  detection. 
This  paper  further  focuses  on  the  extension  of  our  basic  approach 
to  monitoring  systems  that  exhibit  both  continuous  and  discrete  be- 
haviors. Our  monitoring  system  has  been  implemented  using  COTS 
components  and  has  been  demonstrated  in  online  monitoring  of  a 
non-trivial  heating  system. 

Keywords:  fault  detection;  hybrid  systems;  imprecise  models; 
residual  generation 

1 INTRODUCTION 

The  primary  objective  of  a monitoring  system  is  to  detect  abnormal 
behaviors  of  a supervised  system  as  soon  as  possible  to  avoid  shut- 
down or  damage.  Technical  systems  such  as  robots,  production  lines 
or  anti  lock  brakes  provide  a vast  number  of  challenges  for  a monitor- 
ing system,  i.e.,  it  must  be  able  to  deal  with  incomplete  knowledge 
about  the  supervised  system,  to  process  noisy  observations  and  to 
react  within  predefined  time  windows. 

A particularly  important  and  widely-applied  approach  is  model- 
bused  monitoring  [6,  5]  which  relies  on  a comparison  of  the  pre- 
dicted behavior  of  a model  with  the  observed  behavior  of  the  super- 
vised system.  Our  approach  using  dynamic  uncertainty  space  par- 
titioning [12]  is  based  on  imprecise  models  where  the  structure  of 
the  models  is  known  and  the  parameters  may  be  imprecisely  given 
as  numeric  intervals.  These  parameter  intervals  span  the  uncertainty 
space  of  the  model.  From  an  imprecise  model  based  on  intervals  only 
bounds  on  the  trajectory  (envelopes)  can  be  derived.  Dynamic  un- 
certainty space  partitioning  keeps  the  envelopes  small  by  exploiting 
the  measurements  from  the  supervised  system  as  soon  as  possible. 
Whenever  new  measurements  arrive  residuals  are  generated  at  the 
“corner  points”  of  the  uncertainty  space  and  checked  for  consistency 
by  comparing  their  signs.  This  results  in  a fast  fault  detection  [12]. 

The  fundamental  assumption  of  dynamic  uncertainty  space  par- 
titioning is  that  the  model’s  state  values  are  monotonic  within  the 
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range  of  the  uncertainty  space.  Discontinuous  transitions  in  the  sys- 
tem’s model  may  introduce  non-monotonic  behaviors  in  the  state  val- 
ues and,  therefore,  violate  our  assumption  for  the  consistency  check. 
In  order  to  preserve  a conservative  monitoring  approach  for  hybrid 
systems,  we  have  to  extend  our  consistency  check  by  a monotonic- 
ity check.  Whenever  the  monotonicity  of  the  state  values  is  given  the 
consistency  check  can  be  performed  potentially  resulting  in  a refu- 
tation of  the  imprecise  model.  If  the  monotonicity  is  not  known  the 
consistency  check  is  simply  ignored  and  no  model  is  refuted. 

The  remainder  of  this  paper  is  organized  as  follows.  Section  2 de- 
scribes the  technical  details  of  uncertainty  space  partitioning  and  the 
consistency  check.  Section  3 discusses  the  necessary  extensions  of 
our  approach  to  monitoring  systems  which  exhibit  both  continuous 
and  discrete  behaviors.  Section  4 presents  experimental  results  of  our 
monitoring  approach  in  a real-world  system  with  several  changes  of 
a input  value.  A discussion  and  a summary  of  related  work  conclude 
this  paper. 

2 MONITORING  BASED  ON  UNCERTAINTY 
SPACE  PARTITIONING 

2.1  Overview 

Monitoring  methods  based  on  imprecise  models  can  reason  with  in- 
complete knowledge  in  the  model  as  well  as  with  noisy  measure- 
ments. A main  drawback  of  this  approach,  however,  is  that  the  en- 
velopes may  diverge  very  rapidly  which  delays  or  even  inhibits  a 
fault  recognition.  We  have  revised  this  interval  approach  to  model- 
based  monitoring  with  the  primary  goal  to  keep  the  resulting  en- 
velopes as  small  as  possible. 

In  our  approach,  we  exploit  the  measurements  from  the  supervised 
system  as  soon  as  possible  to  refine  the  uncertainty  in  the  model  and 
the  derived  envelopes.  The  key  step  in  our  approach  is  to  partition  the 
uncertainty  space  of  the  model  into  several  subspaces.  The  trajecto- 
ries derived  from  each  subspace  are  then  checked  for  consistency 
with  the  measurements.  Each  inconsistent  subspace  is  refuted  and 
excluded  from  further  investigations.  Partitioning  and  consistency 
checking  are  continued  resulting  in  a smaller  uncertainty  space  of  the 
model.  When  all  subspace  are  refuted,  a discrepancy  between  model 
prediction  and  observation  has  been  recognized  and  a fault  has  been 
detected. 

2.2  Subspace  Parlilioning  and  Consistency 
Checking 

In  general,  a technical  system  can  be  modeled  as 

Xt  =f(Xt_l,Ut_i,pt_i) 

y*  = g(x*,pt) 


where  x*  is  the  state  vector  at  discrete  time  t,  u*  is  the  input  vec- 
tor at  time  t,  p t is  the  parameter  vector  at  time  t , y*  is  the  out- 
put vector  at  time  t,  and  g and  f are  vector  functions.  In  an  ex- 
act model,  p*  is  a vector  of  real  numbers.  However,  in  a model 
with  uncertain  parameters,  p*  is  replaced  by  a vector  of  intervals 

Pt  = [(PM,Pi,t),  ( P2't,P2,t)> ' ' ' . (PK't,PK,t)]T > where  K is  the 
number  of  uncertain  parameters.  A model  with  uncertain  parameters, 
i.e.,  an  imprecise  model,  can  therefore  be  described  as: 


x*  = u*_i,  pt_i)  p, 

yt=g(xt,pt) 

Equation  2 is  the  starting  point  of  our  approach.  It  defines  an  im- 
precise model  of  the  supervised  system  with  K uncertain  parame- 
ters. Thus,  this  model  has  a if -dimensional  uncertainty  space.  In 
order  to  divide  this  uncertainty  space  we  have  to  define  a partition 
q*  = with  q*  C pt. 

A complete  partitioning  of  the  uncertainty  space  at  any  time  t into 
M partitions  must  satisfy  the  following  condition  |Jm  q^n'>  = pt 
where  m = 1, . . . , M.  A model  based  on  a partition  of  the  uncer- 
tainty space  is  referred  to  as  subspace  model.  From  the  definition  of 
a partition,  we  can  finally  define  the  state  of  a subspace  model  in: 


(3) 


With  the  monotonicity  assumption  of  f and  g with  regard  to  the 
parameters  p*  over  the  range  of  the  intervals,  the  (uncertain)  state  of 
a subspace  model  can  be  represented  by  the  (exact)  state  of  the  corner 
points  of  a subspace.  The  corner  points  of  a subspace  are  defined  as 
all  combinations  of  upper  and  lower  bounds  of  a partition  qt  and  can 
be  represented  as  set  Q ^ = {q^}  with  * = 1,  • . . , 2K . Thus,  an 
uncertainty  space  of  dimension  K results  in  2K  corner  points.  The 
states  at  the  corner  points  can  be  represented  as  set 


r(m) 

Lt 

r(m) 


= {x^  : Af  = f(xt-M>ui-i,qn,i)} 


(m) 


,(m-) 


vr  = {y*(“):y&)  = 8(^.0} 


(m)  (m)'. 


(4) 


where  q^™-1  is  an  exact  parameter  vector  at  time  t from  the  subspace 
m and  at  corner  i = 1, . . . , 2h  of  this  subspace.  Note,  that  x^ 
are  state  vectors,  and  also  y ^ are  output  vectors  with  exact  values. 
Note  that  this  approach  assumes  that  the  parameters  of  the  system 
are  constant,  and  are  not  varying  in  time.  This  assumption  will  be 
discussed  later. 

This  representation  of  an  uncertain  state  is  directly  exploited  by 
our  consistency  check  for  a given  subspace  m.  First,  a residual  is 
calculated  for  each  state  at  a comer  point  using  the  measurements 
at  time  t,  i.e.,  r^)  — y t, measured  ~ where  has  the 

same  dimension  J as  yt, measured  and  y^ • Then,  the  minimum 
and  maximum  values  of  the  residual  are  determined  as 


r(m). 

r(m> 


= min{r  } (5) 

= max(rtly}  (6) 

% 


with  i = 1, . . . , 2h , and  j = 1 Finally,  subspace  model  m 
is  checked  for  consistency  simply  by  comparing  the  signs  of  j 
and  r^aa!  •.  The  subspace  model  m is  consistent  with  the  measure- 
ments, iff 


sgn(r  j)  + sgn(r 


(m)  \ 


(7) 


Figure  1 . Consistency  check  with  one  uncertain  parameter  p and  three 
subspaces  qi,q2,  and  qs.  The  residuals  at  the  corner  points  of  subspace  qi 
are  both  negative,  therefore,  the  model  with  the  subspace  qi  is  inconsistent 
with  the  measurement.  In  subspace  fo,  the  residuals  at  the  corner  points  have 
different  signs.  Thus,  q%  is  consistent.  For  the  parameter  range  of  subspace 
qs  the  monotonicity  assumption  is  violated.  In  this  case,  checking  the 
residuals’  signs  at  the  corner  points  is  not  feasible. 


holds  for  all  elements  j = 1 

Informally,  Equation  7 checks  whether  the  zero  vector  lies  within 
the  “residual  subspace”  (see  Figure  1).  If  this  equation  is  violated,  the 
subspace  model  m is  refuted.  This  simple  consistency  check  holds 
also  if  not  all  elements  of  y are  included  in  the  measurements.  In 
this  case,  a comparison  with  the  missing  elements  is  simply  ignored. 
Since  this  technique  is  based  on  the  calculation  of  an  exact  state  (at 
corner  points),  we  can  use  standard  numerical  methods  for  comput- 
ing the  solution  of  differential  equations.  Note  that  subspaces  are 
only  refuted  when  they  are  genuinely  inconsistent  with  the  measure- 
ments. 

Due  to  the  uncertainty  in  the  parameters  this  method  may  result  in 
diverging  envelopes.  This  deviation  of  the  predicted  value  to  the  “cor- 
rect” value  over  time  is  referred  to  as  accumulation  uncertainty.  In 
order  to  keep  this  deviation  small  we  have  also  introduced  a dynamic 
partitioning  of  the  subspace  models.  During  monitoring  consistent 
subspaces  are  further  partitioned  resulting  in  smaller  subspace  mod- 
els that  potentially  describe  the  supervised  system  more  precisely 
[12]. 

3 MONITORING  PIECEWISE  CONTINUOUS 
BEHAVIORS 

3.1  Monotonicity  at  Transitions 

In  order  to  extend  our  approach  to  monitoring  piecewise  continuous 
behaviors  and  discrete  transitions,  we  must  have  a closer  look  at  our 
monotonicity  assumption.  Remember  that  the  result  of  our  consis- 
tency check  is  only  valid  if  the  state  values  within  the  subspace  are 
monotonic. 

In  general  the  monotonicity  of  the  state  values  with  regard  to  the 
parameters  is  not  guaranteed  by  the  monotonicity  of  the  system  equa- 
tions f and  g.  The  monotonicity  is  only  given  when  the  following 
assumptions  also  hold: 

1 . the  system  input  u does  not  change,  and 

2.  the  initial  values  of  a subspace  model  are  the  same  over  its  com- 
plete uncertainty  space. 

Both  assumptions  are  important  for  monitoring  discrete  and  con- 
tinuous behaviors.  The  first  assumption  is  especially  relevant  for  tran- 
sitions because  they  are  often  triggered  by  stepwise  changes  of  the 


system  input  (e.g.,  caused  by  operator  actions).  Such  transitions  vio- 
late, therefore,  the  first  assumption.  The  second  assumption  is  a sim- 
ple consequence  of  the  integration  of  the  given  differential  equation: 

t 

x(t)  = xt0  + J i(r)dr  (8) 

to 

If  the  initial  states  x*0  are  different  at  some  corners  in  the  sub- 
space model,  the  state  values  x*  may  not  be  monotonic  (even  if  x is 
monotonic).  However,  monotonicity  is  guaranteed  after  some  time. 

As  discussed  above  discontinuous  transitions  may  result  in  a non- 
monotonicity of  the  state  values  with  regard  to  the  parameters  (for 
a limited  period  of  time),  which  in  turn  leads  to  an  incorrect  consis- 
tency check.  Thus,  to  maintain  a correct  (and  conservative)  monitor- 
ing technique  we  must  extend  the  consistency  check  by  a check  for 
monotonicity.  If  the  monotonicity  is  not  guaranteed  the  consistency 
check  is  simply  ignored  and  this  subspace  can  not  be  refuted.  At 
some  time  after  the  transition  the  subspace  may  become  monotonic 
again  and  the  consistency  check  can  be  applied  again. 


Figure  2.  Monotonicity  check  with  one  state  value  and  one  parameter.  To 
check  the  subspace  model  for  monotonicity,  the  gradients  of  the  state  values 
with  regard  to  the  parameters  are  calculated  at  the  corner  points.  In  this 
example,  the  subspace  qi  is  monotone  and  the  subspace  q2  violates  the 
monotonicity  check. 

use  also  a differential  description  of  the  system  (f  = x),  the  mono- 
tonicity check  does  not  significantly  increase  the  computational  load. 
Note  that  matrix  A is  constant  for  linear  systems. 


3.2  Checking  for  Monotonicity 

The  monotonicity  of  the  state  values  for  an  individual  subspace  is 
checked  by  the  following  method. 

We  define  a matrix  B(f,  x,  p)  with  the  elements 


bij(t,x,p) 


p) 

dPi 


(9) 


where  t is  the  time,  x the  state  vector,  and  p the  parameter  vector 
with  its  elements  pj.  We  also  define  the  matrix  C(t,  x,  p)  with  the 
elements 


4 THE  MONOTONICITY  CHECK  IN  A 
REAL-WORLD  SYSTEM 

We  now  examine  the  monotonicity  behavior  on  a “real”  technical 
system  which  is  comprised  of  three  heating/cooling  components 
mounted  on  a thermal  conductive  plate.  A process  control  com- 
puter (B&R  2003)  controls  the  three  heating/cooling  components. 
The  measured  samples  as  well  as  the  control  actions  issued  are  trans- 
ferred to  the  monitoring  system  via  a RS  232  interface. 

Our  model  which  includes  the  three  components  with  heating  ele- 
ments is  given  as 


r±  s dxi(t,  p) 

Cij  (t,  X,  p)  = — . (10) 

The  matrix  C(t,  x,  p)  is  calculated  by 

Pl  = A(t,x,p)C(t,x,p)  + B(t,x,p),  (11) 

where  C(0,xo,p)  = 0 (the  empty  matrix),  and  the  matrix 

A (t,  x,  p)  is  defined  as 


dii(t,x,  p) 
dxj 


(12) 


The  elements  Cjy(t,x,p)  give  us  the  trend  of  the  state  value 
Xi(t,  p)  with  regard  to  the  parameter  pj.  This  is  exploited  by  our 
monotonicity  check.  The  state  values  of  a subspace  model  are  mono- 
tonic, iff 


Sgn  {Cij,min)  — Sgll  (Cij,maz  ) (13) 

holds  for  all  state  values  i = 1, . . . , I and  all  directions  of  the 
uncertainty  space  j = 1 ,K.  dj,min  are  the  appropriate  val- 
ues of  Cij  (t,  x,  p)  at  the  comer  min,  and  dj,maa>  are  the  values  of 
cij  ( t , x,  p)  at  the  corner  max  of  that  subspace  model  (as  described 
with  Equations  5 and  6). 

Figure  2 depicts  the  monotonicity  check.  In  general,  the  informa- 
tion at  the  comer  points  is  not  sufficient  to  decide  on  monotonicity. 
However,  assuming  the  monotonicity  of  the  functions  f and  g with 
regard  to  the  parameter,  the  monotonicity  check  becomes  sufficient. 

The  calculation  of  the  monotonicity  check  implies  a numerical  so- 
lution of  the  differential  equation  (Equation  12).  However,  since  we 


Ti  = ±{qa  - Li(Ti  - T0)  - L12{Ti  - T2 )) 

T2  = ^(qa  + Li2(Ti  - Ti)  - L2(T2  - To) 

—L2$(T2  — T3))  1 

Ti  = -^(qa  + L2i(T2  — Ti)  — Li(Ti  — To)) 

where  Ti  is  the  temperature  of  the  three  components,  Ci  is  the 
mass  of  the  components,  qi  is  the  heat  flow  into  the  components,  Li 
the  thermal  conductivity  between  the  component  i and  the  environ- 
ment, Lij  the  thermal  conductivity  between  the  component  i and  j, 
and  To  the  temperature  of  the  environment.  We  can  reduce  the  com- 
plexity of  this  model  by  exploiting  the  symmetric  construction  of  the 
heating  system  (Li  = L 1,  La  = Li2,  Ci  — Ci)  resulting  in  a total 
of  five  uncertain  parameters. 

The  state  vector  is  given  as  x = (Ti,  T2,  Ti)T,  the  input  vector  as 
u = {qn,qi2,qa,To)T,  and  the  output  vector  asy  = (Ti+n,i,r2  + 
n2,Ti  + m)T , where  nt  is  the  noise  of  each  temperature  sensor.  The 
noise  parameters  are  also  included  in  the  uncertainty  space  resulting 
in  a total  of  eight  uncertain  parameters.  Note  that  noise  parameters 
are  not  dynamically  partitioned  into  smaller  intervals  and  they  are 
not  considered  by  the  monotonicity  check. 

We  have  measured  the  input  values  with  qaff  = 1.24W  and 
qon  = 34.8 W (heating  element  is  either  turned  off  or  turned  on). 
With  an  initial  refinement  step,  we  get  the  parameter  intervals  as 
Li  = [0.12,0.13],  L2  = [0.15,0.18],  L12  = [0.62,0.73],  Ci  = 
[51,  54],  C2  = [61, 65].  The  refinement  step  is  performed  in  a single 
continuous  behavior  segment  [12], 

To  examine  the  non-monotonic  behavior  in  the  system,  we  ob- 
serve the  system  after  a transition,  and  count  the  subspace  models, 


Figure  3.  Measurements  from  the  heating  system  used  for  monotonicity  checking.  The  input  H2  is  generated  by  the  process  control  computer  and  sent  to  the 

monitoring  system. 


which  are  marked  as  non-monotonic.  Over  time,  this  gives  us  a pic- 
ture, how  the  transition  produce  non-monotonicity  in  the  state  values. 
We  choose  the  following  scenario: 

Control  state  1:  Heat  T2  until  T2  reaches  70.  Then  go  to  state  2. 
Control  state  2:  Heat  T2,  if  X2  < 70.  If  t$to,te2  > lOO.s-ec,  go  to 

state  3. 

Control  state  3:  Heat  T2,  if  T2  < 90.  If  t states  > 100 .sec  A T2  > 

90,  go  to  state  4. 

Control  state  4:  Do  not  heat.  If  T2  < 50,  go  to  state  1 . 

Figure  3 plots  the  resulting  measurements  for  this  scenario.  The 
heating  flag  H2  (generated  by  the  PCC)  is  used,  to  get  a discrete 
change  of  an  input.  To  implement  the  heating  element  characteristic, 
we  assume  an  additional  mass  Ch  and  a thermal  conductivity  L2h 
between  component  2 and  the  heating  mass: 

th  2 = ~(32.82H2-L2h{Th2-T2))  (15) 

qi2  = 1.24  4-  L2h(Th2  — T2)  (16) 

To  demonstrate  the  non-monotonic  effect  after  a stepwise  change 
of  an  input,  we  check  the  monotonicity  of  all  subspace  models,  and 
count  non-monotonic  subspace  models,  i.e.,  which  violate  Equa- 
tion 13.  Figure  4 shows  a part  of  the  scenario,  where  the  temperature 
of  component  2 is  hold  at  90  degree  (control  state  3).  For  this  plot,  we 
have  started  with  128  subspace  models,  and  no  dynamic  partitioning 
is  introduced.  Due  to  the  discrete  controller  the  heating  is  turned  on 
and  off  several  times.  At  each  transition  about  40  subspace  models 
are  non-monotonic.  An  interesting  observation  in  this  figure  is,  that 
the  non-monotonic  subspaces  disappear  quickly,  if  the  heating  flag  is 
turned  off  only  for  a short  time. 

Figure  5 shows  the  number  of  the  non-monotonic  subspace  models 
after  control  state  3.  The  peak  here  is  about  30  subspace  models.  It 
shows,  that  non-monotonic  subspace  models  are  also  existing  for  a 
“longer”  time  period  (here  about  400  seconds)  after  the  last  discrete 
change  of  an  input. 

Non-monotonic  subspace  models  are  not  refuted,  and,  therefore, 
do  not  make  any  contribution  to  decrease  the  uncertainty  space.  Al- 
though the  number  of  non-monotonic  subspace  models  are  quite  high 
(about  50  percent  of  the  current  subspace  models)  for  some  times,  it 
has  not  a significantly  influence  to  the  refutation.  The  reason  is,  how- 
ever, that  such  peaks  does  not  hold  for  long  time,  so  the  consistency 
check  soon  becomes  valid  again.  At  this  example  the  number  of  con- 
sistent subspace  models  at  the  end  of  the  scenario  is  about  20. 


Figure  5.  The  non-monotonicity  after  the  switching  period.  Drawn  are  (as 
same  as  in  figure  4)  the  measurement  and  the  envelopes  of  T2,  the  heating 
flag  H2  and  the  number  of  non-monotonic  subspace  models  NM.  Some 
subspace  models  are  non-monotonic  after  the  heating  period. 

5 DISCUSSION 

In  this  paper,  we  have  presented  a model-based  monitoring  approach 
based  on  uncertainty  space  partitioning.  The  fundamental  assump- 
tion of  this  approach  is  the  monotonicity  of  the  state  values  with  re- 
gard to  the  range  of  the  parameters.  In  systems  which  exhibit  both 
discrete  and  continuous  behaviors  the  monotonicity  can  not  be  guar- 
anteed only  by  the  monotonicity  of  the  vector  functions.  Thus,  in  or- 
der to  apply  our  basic  approach  to  monitor  hybrid  systems,  we  have 
introduced  a monotonicity  check  for  the  state  values. 

Note  the  difference  of  monitoring  based  on  pre-calculated  en- 
velopes with  our  approach.  With  pre-calculated  envelopes,  the  en- 
velopes remain  constant  over  the  complete  monitoring  process.  In 
our  approach,  the  envelopes  may  become  smaller  than  the  initial  ones 
due  to  the  refutation  of  inconsistent  subspaces  during  monitoring. 
This  results  in  an  earlier  detection  of  faults.  However,  there  is  a sig- 
nificant increase  in  the  computational  load  of  subspace  partitioning. 

Our  approach  is  based  on  computing  the  envelopes  of  differen- 
tial equations.  For  complex  models,  the  overall  runtime  of  our  mon- 
itoring algorithm  is  dominated  by  solving  the  differential  equations, 
especially  when  a high-precise  method  such  as  Runge-Kutta  is  used. 
The  computational  complexity  of  our  algorithm  for  a single  time-step 
can  be  estimated  as 

0{M2K  (p  + //.))  (17) 

where  M is  the  number  of  partitions,  K is  the  number  of  uncertainty 
parameters,  p is  the  time  of  the  Runge-Kutta  algorithm,  and  p is  the 
time  of  the  matrix  multiplication  according  to  Equation  1 1 . The  time 
p strongly  depends  on  the  dynamic  properties  of  the  system,  and  for 
high  dynamic  systems,  the  assumption  p>  p holds. 


Figure  4.  First  overview  of  the  monotonicity  of  the  technical  system.  Drawn  are  the  measured  T2  with  its  envelopes.  II2  is  the  heating  flag  for  the  second 
component,  and  NM  is  the  number  of  the  non-monotone  subspace  models.  The  discrete  change  of  the  input  makes  a directly  effect  to  the  monotonicity  of  the 

state  values. 


This  approach  can  also  be  seen  as  system  identification , because 
refuting  subspace  models  reduces  the  uncertainty  space,  resulting  in 
smaller  bounding  intervals  on  the  parameters.  Measurement  noise 
can  also  be  handled  by  introducing  additional  uncertainty  parameters 
into  the  model. 

However,  this  approach  is  in  contrast  to  traditional  system  identi- 
fication where  the  model  space  is  specified  by  a parameterized  dif- 
ferential equation.  Identification  selects  numerical  parameter  values 
so  that  simulation  of  the  model  best  matches  the  measurements.  By 
using  refutation  instead  of  search  our  method  is  able  to  derive  guar- 
anteed bounds  on  the  trajectories. 

Model-based  monitoring  using  uncertainty  space  partitioning  is 
related  to  the  interval  identification  algorithm  of  Schaich  et  al.  [13], 
In  their  approach  the  consistency  check  is  only  performed  at  the 
qualitative  level.  Thus,  valuable  detection  time  is  lost,  as  long  as  the 
fault  is  only  manifested  in  a quantitative  value.  Petridis  an  Kehagias 

[10]  have  also  developed  an  algorithm  with  subspace  partitioning. 
The  partitioning  is  only  performed  in  advance  and  the  consistency 
check  is  based  on  probabilities  depending  on  the  noise  in  the  sys- 
tem. Other  work  in  monitoring  [7,  9,  3]  uses  multiple  models  for 
fault  detection.  These  models  represent  known  faults  of  the  super- 
vised system.  From  the  viewpoint  of  system  identification,  our  ap- 
proach is  closely  related  to  semi-quantitative  system  identification 

[8].  Identification  of  both  approaches  are  grounded  on  the  refuta- 
tion of  subspace  models  that  are  known  to  be  inconsistent  with  the 
measurements.  Semi-quantitative  system  identification  performs  re- 
finement at  the  qualitative  and  interval  level.  Semi-quantitative  sys- 
tem identification  has  also  been  applied  to  model-based  monitoring 

[11] ,  Bonarini  and  Bontempi  [4]  have  developed  a quite  similar  ap- 
proach to  our  consistency  check.  However,  they  have  focused  on  un- 
certainty initial  state  values,  which  are  given  as  intervals.  Also  re- 
lated to  our  work  is  Armengol  et  al.  [1,  2],  The  simulation  is  based 
on  modal  interval  arithmetics,  which  produces  overbounded  and  un- 
derbounded envelopes  of  a technical  system.  To  minimize  the  rate 
of  false  and  missed  alarms,  the  uncertainty  space  is  only  partitioned 
at  critical  measurements  (which  are  between  the  underbounded  and 
overbounded  envelopes).  In  comparison  to  our  approach,  we  sim- 
ulate at  each  corner  of  the  uncertainty  space,  which  leads  to  exact 
envelopes  (no  false  and  missed  alarms,  according  to  observability) 
for  linear  systems. 

Directions  for  future  work  include  (i)  the  incorporation  of  (un- 
known) discontinuous  transitions  in  our  monitoring  approach,  (ii) 


further  investigations  on  the  monotonicity  properties  after  a discon- 
tinuous transition,  especially  in  the  context  of  non-linear  systems, 
and  (iii)  the  improvement  of  the  dynamic  uncertainty  space  parti- 
tioning. 
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